Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/J8xAVkqYLMb47ptuZk5Ix4lfjWU.roa
File: J8xAVkqYLMb47ptuZk5Ix4lfjWU.roa (raw, json)
Hash identifier: pHPtPx9vsv712QiSLZLL9G31WWmDzgqCzXERnuz9zRg=
Subject key identifier: 27:CC:40:56:4A:98:2C:C6:F8:EE:9B:6E:66:4E:48:C7:89:5F:8D:65
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019F62FE58BD399D84B7084A41EFF0EA524B
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/J8xAVkqYLMb47ptuZk5Ix4lfjWU.roa
Signing time: Tue 14 Jul 2026 23:37:43 +0000
ROA not before: Tue 14 Jul 2026 23:37:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8916
IP address blocks: 188.246.192.0/20 maxlen: 20
188.246.216.0/21 maxlen: 24
193.108.199.0/24 maxlen: 24
213.5.88.0/21 maxlen: 21
2001:67c:1b8::/48 maxlen: 48
2a03:9800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:62:fe:58:bd:39:9d:84:b7:08:4a:41:ef:f0:ea:52:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Jul 14 23:37:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27cc40564a982cc6f8ee9b6e664e48c7895f8d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:72:23:e1:45:2d:13:b0:0d:b0:ae:2d:12:61:
14:ed:73:17:95:fe:c9:f7:5b:a3:43:78:cf:9d:8a:
fb:6b:f1:74:64:ad:9a:8b:c7:7e:b0:1c:dc:43:7d:
26:09:85:19:39:0d:0b:a5:75:f2:ec:b3:0c:2c:19:
25:08:47:c2:17:79:bb:61:67:76:9c:07:00:f7:39:
df:cc:5f:c1:0b:3f:fe:d5:80:dc:40:41:40:04:6e:
0e:e4:f2:c3:8e:5c:c7:9d:c5:7e:79:b1:28:86:80:
ca:1a:59:2d:7a:a0:5a:5a:86:d4:af:2e:0c:15:7e:
87:c3:a7:96:6e:2a:cf:3b:e4:49:a2:99:27:91:c6:
a4:79:ba:f2:9c:6b:bb:67:9f:d5:01:1e:41:35:6e:
f6:8e:d6:7d:6d:f1:d2:db:c6:60:6d:17:32:88:9c:
c9:38:0e:b2:ac:1f:55:14:02:35:26:bf:05:ef:33:
b2:6d:7a:6e:42:c0:b6:22:20:06:05:b1:72:1b:70:
40:82:a0:cb:45:95:36:61:05:ff:34:0b:d5:4d:1a:
2b:6d:80:2c:25:b3:b9:c3:84:fb:a3:58:c3:4f:81:
a8:cd:f5:69:6c:67:71:b6:7d:85:10:2f:b7:86:ac:
aa:ad:19:38:56:4c:12:a7:f3:c4:f3:03:b5:19:d0:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CC:40:56:4A:98:2C:C6:F8:EE:9B:6E:66:4E:48:C7:89:5F:8D:65
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/J8xAVkqYLMb47ptuZk5Ix4lfjWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.246.192.0/20
188.246.216.0/21
193.108.199.0/24
213.5.88.0/21
IPv6:
2001:67c:1b8::/48
2a03:9800::/29
Signature Algorithm: sha256WithRSAEncryption
17:ac:6c:cf:97:58:e5:9a:b4:42:52:62:a1:a9:6d:a7:83:c0:
cb:c6:82:23:91:e3:98:0f:53:3e:26:01:6d:5d:15:85:f8:52:
e1:7a:21:b3:ba:3d:f3:da:62:b6:77:72:98:ec:73:19:df:0f:
f2:00:92:b8:a4:c4:04:25:ed:d5:1f:4d:b0:74:45:99:aa:f2:
59:b3:6e:72:b2:1f:34:dd:ac:69:5e:92:c3:0b:9f:f3:ee:0e:
65:71:b2:01:06:93:b7:56:48:2c:b1:b3:bd:aa:a8:70:cc:3d:
c6:cc:c5:d0:52:e9:ef:b0:35:ff:2f:5a:04:cb:21:7d:a2:61:
c5:f8:9c:05:fb:79:20:dc:ee:d5:1d:23:15:39:92:13:3a:75:
4c:e3:06:68:0c:e9:b9:64:fd:fe:4b:aa:78:94:5b:ae:39:89:
3e:59:57:cd:b9:9c:21:7b:88:85:96:c0:fc:8b:77:07:3b:ef:
a7:5d:22:f3:b7:90:b0:5a:d8:a2:85:bf:12:65:ab:ad:e9:21:
75:e1:26:e6:8b:4e:ae:4c:66:04:eb:19:ab:61:15:42:08:e9:
1e:d0:62:ac:a0:30:11:d4:36:6b:25:38:ec:3f:0c:16:e6:ed:
e7:6f:5f:be:08:06:10:c1:d8:4a:a2:b3:f8:78:4b:98:61:bf:
1c:f3:9d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:16 2026 by rpki-client